AWS outposts documentation change
Summary
Added LAG metrics documentation, updated dimensions for existing metrics to include LagId, and added operational status monitoring for Link Aggregation Groups
Security assessment
The changes enhance monitoring capabilities by adding LAG metrics and dimensions but contain no evidence of addressing security vulnerabilities. Updates focus on operational visibility for network troubleshooting without security-specific context like vulnerabilities, exploits, or security controls.
Diff
diff --git a/outposts/latest/userguide/outposts-cloudwatch-metrics.md b/outposts/latest/userguide/outposts-cloudwatch-metrics.md index 703c5e8ec..0f928dba1 100644 --- a//outposts/latest/userguide/outposts-cloudwatch-metrics.md +++ b//outposts/latest/userguide/outposts-cloudwatch-metrics.md @@ -39,0 +40,2 @@ The `AWS/Outposts` namespace includes the following categories of metrics. + * LAG metrics + @@ -88 +90 @@ Metric | Dimension | Description -`VifBgpSessionState` | **Dimensions for local gateway VIFs** : `OutpostsId`, `VirtualInterfaceGroupId`, `VirtualInterfaceId`. **Dimensions for service link VIFs** : `OutpostsId`, `VirtualInterfaceId`. | The Border Gateway Protocol (BGP) session state between the AWS Outposts of virtual interface (VIF) and on-premise devices. **Unit** : Values 1 through 6 where: +`VifBgpSessionState` | **Dimensions for local gateway VIFs** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, `VirtualInterfaceId`. **Dimensions for service link VIFs** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, `VirtualInterfaceId`. `VirtualInterfaceGroupId` always displays as "-" for service link VIFs; included for CloudWatch widget alignment. | The Border Gateway Protocol (BGP) session state between the AWS Outposts of virtual interface (VIF) and on-premise devices. **Unit** : Values 1 through 6 where: @@ -98 +100 @@ Metric | Dimension | Description -`VifConnectionStatus` | **Dimensions for local gateway VIFs** : `OutpostsId`, `VirtualInterfaceGroupId`, `VirtualInterfaceId`. **Dimensions for service link VIFs** : `OutpostsId`, `VirtualInterfaceId`. | Shows whether the virtual interfaces (VIFs) are ready to forward traffic. **Unit** : 1 or 0 where: +`VifConnectionStatus` | **Dimensions for local gateway VIFs** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, `VirtualInterfaceId`. **Dimensions for service link VIFs** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, `VirtualInterfaceId`. `VirtualInterfaceGroupId` always displays as "-" for service link VIFs; included for CloudWatch widget alignment. | Shows whether the virtual interfaces (VIFs) are ready to forward traffic. **Unit** : 1 or 0 where: @@ -104,2 +106,30 @@ Metric | Dimension | Description -`IfTrafficIn` | **Dimensions for local gateway VIFs (lgw-vif)** : `OutpostsId`, `VirtualInterfaceGroupId`, and `VirtualInterfaceId` **Dimensions for service link VIFs (sl-vif)** : `OutpostsId` and `VirtualInterfaceId` | The bitrate of data that the Outposts Virtual Interfaces (VIFs) receive from the connected local network devices. **Unit** : Bits per second **Maximum resolution** : 5 minutes **Statistics** : The most useful statistics are `Max` and `Min`. -`IfTrafficOut` | **Dimensions for local gateway VIFs (lgw-vif)** : `OutpostsId`, `VirtualInterfaceGroupId`, and `VirtualInterfaceId` **Dimensions for service link VIFs (sl-vif)** : `OutpostsId` and `VirtualInterfaceId` | The bitrate of data that the Outposts Virtual Interfaces (VIFs) transfer to the connected local network devices. **Unit** : Bits per second **Maximum resolution** : 5 minutes **Statistics** : The most useful statistics are `Max` and `Min`. +`IfTrafficIn` | **Dimensions for local gateway VIFs (lgw-vif)** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, and `VirtualInterfaceId` **Dimensions for service link VIFs (sl-vif)** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, and `VirtualInterfaceId`. `VirtualInterfaceGroupId` always displays as "-" for service link VIFs; included for CloudWatch widget alignment. | The bitrate of data that the Outposts Virtual Interfaces (VIFs) receive from the connected local network devices. **Unit** : Bits per second **Maximum resolution** : 5 minutes **Statistics** : The most useful statistics are `Max` and `Min`. +`IfTrafficOut` | **Dimensions for local gateway VIFs (lgw-vif)** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, and `VirtualInterfaceId` **Dimensions for service link VIFs (sl-vif)** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, and `VirtualInterfaceId`. `VirtualInterfaceGroupId` always displays as "-" for service link VIFs; included for CloudWatch widget alignment. | The bitrate of data that the Outposts Virtual Interfaces (VIFs) transfer to the connected local network devices. **Unit** : Bits per second **Maximum resolution** : 5 minutes **Statistics** : The most useful statistics are `Max` and `Min`. + +The `LagId` dimension has been added to the `VifBgpSessionState`, `VifConnectionStatus`, `IfTrafficIn`, and `IfTrafficOut` metrics. This enables you to associate VIF-level metrics with their corresponding LAG, making it easier to identify whether a connectivity issue originates at the VIF configuration level or the physical LAG level. A new CloudWatch widget displays all metrics (existing VIF metrics and new LAG metrics) using the updated dimension name `OutpostId`. The previous widget continues to display with the legacy dimension name `OutpostsId` for backward compatibility. + +### LAG metrics + +AWS Outposts publishes Link Aggregation Group (LAG) status metrics to Amazon CloudWatch. These metrics provide visibility into the operational status of LAG connections between Outpost network devices and your on-premises network devices. Use these metrics together with VIF metrics to correlate physical LAG health with virtual interface and BGP session state for end-to-end connectivity troubleshooting. + +Metric | Dimensions | Description +---|---|--- +`LagStatus` | `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, `VirtualInterfaceId` | The operational status of the LAG connection between an Outpost network device and your on-premises network device. **Unit** : Values where: + + * `1` – LAG is operational (up) + * `0` – LAG is not operational (down) + +**Reporting Criteria** : There is data to report. **Maximum resolution** : 5 minutes **Statistics** : The most useful statistic is `Maximum`. + +The following dimensions are used for the `LagStatus` metric. + +Dimension | Description +---|--- +`OutpostId` | The ID of the Outpost (e.g., op-1234567890abcdef0) +`LagId` | The ID of the Link Aggregation Group (e.g., op-lag-02343ndswe3190d1) +`VirtualInterfaceGroupId` | The ID of the Virtual Interface Group. Always displays as "-" for LAG metrics; included for CloudWatch widget alignment with VIF metrics. +`VirtualInterfaceId` | The ID of the Virtual Interface. Always displays as "-" for LAG metrics; included for CloudWatch widget alignment with VIF metrics. + +###### Important + +If the entire Outpost loses connectivity, the underlying telemetry service cannot collect data from network devices. No metric data points are published during this period, and the CloudWatch graph will show a gap for the affected time range. @@ -126,0 +157 @@ Dimension | Description +`LagId` | The ID of the Link Aggregation Group associated with this VIF.